Vendors whose records changed
as of the 2026-09-07 snapshot
1,243 vendors
named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.
Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.
Ranked by count, not rate; a vendor with more records has more that can change.
The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.
| Vendor | Records (sorted, highest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both. | Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column. | Products, Distinct products named across this vendor's changed records. | Most common kind, The kind of change with the most rows for this vendor, and how many kinds there are. | Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it. |
|---|---|---|---|---|---|
| Poly | 4 | 100 | 33 | Product added | 2024-01-09 |
| GitHub | 4 | 16 | 2 | Fix version moved | 2026-08-21 |
| Canon Inc. | 4 | 13 | 5 | Product added | 2026-01-16 |
| SimpleHelp | 4 | 7 | 1 | Added to CISA KEV · 2 kinds | 2026-06-29 |
| WebPros | 4 | 6 | 3 | Product added · 3 kinds | 2026-05-11 |
| SolarWinds | 4 | 5 | 2 | Added to CISA KEV · 2 kinds | 2026-08-04 |
| 1clickmigration | 4 | 4 | 2 | Product added · 2 kinds | 2026-04-08 |
| Altium | 4 | 4 | 2 | Product added | 2026-01-19 |
| Android | 4 | 4 | 2 | Added to CISA KEV | 2026-06-02 |
| Aresit | 4 | 4 | 1 | Product added | 2026-04-08 |
| ASUS | 4 | 4 | 4 | Added to CISA KEV · 2 kinds | 2025-12-17 |
| BerriAI | 4 | 4 | 1 | Added to CISA KEV · 2 kinds | 2026-09-02 |
| Bitpressadmin | 4 | 4 | 2 | Product added | 2026-04-08 |
| Craft CMS | 4 | 4 | 1 | Added to CISA KEV | 2026-03-20 |
| Cridiostudio | 4 | 4 | 2 | Affected range extended | 2026-04-01 |
| Eleopard | 4 | 4 | 1 | Affected range extended | 2026-04-01 |
| Eyecix | 4 | 4 | 2 | Affected range extended | 2026-04-01 |
| Gallerycreator | 4 | 4 | 2 | Product added | 2026-04-08 |
| Gavias | 4 | 4 | 4 | Affected range extended · 2 kinds | 2026-04-01 |
| Gladinet | 4 | 4 | 3 | Added to CISA KEV | 2025-12-15 |
| Grafana | 4 | 4 | 4 | Fix version moved · 2 kinds | 2026-08-19 |
| Kamleshyadav | 4 | 4 | 3 | Affected range extended | 2026-04-01 |
| N-able | 4 | 4 | 1 | Added to CISA KEV | 2026-08-04 |
| Nicheaddons | 4 | 4 | 3 | Affected range extended | 2026-04-08 |
| NVIDIA | 4 | 4 | 4 | Product added | 2026-05-26 |
| Qualcomm | 4 | 4 | 1 | Added to CISA KEV | 2026-03-03 |
| Romancode | 4 | 4 | 1 | Affected range extended | 2026-04-01 |
| Rubengc | 4 | 4 | 2 | Product added | 2026-04-08 |
| Salesforce | 4 | 4 | 2 | Fix version moved | 2025-11-11 |
| Samsung | 4 | 4 | 2 | Added to CISA KEV | 2026-04-24 |
| Sangoma | 4 | 4 | 2 | Added to CISA KEV | 2026-09-02 |
| Themepoints | 4 | 4 | 3 | Affected range extended · 2 kinds | 2026-04-08 |
| Themesflat | 4 | 4 | 1 | Affected range extended | 2026-04-08 |
| Vikas Ratudi | 4 | 4 | 1 | Product added | 2026-04-01 |
| Wowdevs | 4 | 4 | 1 | Product added | 2026-04-08 |
| Wp Swings | 4 | 4 | 3 | Affected range extended | 2026-04-08 |
| Wpfactory | 4 | 4 | 4 | Affected range extended | 2026-04-01 |
| Wpwebinarsystem | 4 | 4 | 1 | Affected range extended | 2026-04-01 |
| Zealousweb | 4 | 4 | 4 | Affected range extended | 2026-04-01 |
| SUSE | 3 | 14 | 14 | Product added · 2 kinds | 2025-09-03 |
| Nec Platforms, Ltd. | 3 | 9 | 4 | Product added | 2026-04-10 |
| wso2 | 3 | 9 | 9 | Product added | 2025-10-21 |
| SmarterTools | 3 | 6 | 1 | Added to CISA KEV · 2 kinds | 2026-04-21 |
| Rapid7 | 3 | 5 | 2 | Added to CISA KEV · 5 kinds | 2026-07-24 |
| SAP | 3 | 5 | 1 | Added to CISA KEV · 2 kinds | 2026-08-06 |
| Check Point | 3 | 4 | 3 | Added to CISA KEV · 2 kinds | 2026-07-22 |
| Go Standard Library | 3 | 4 | 4 | Product added | 2026-08-13 |
| Hitachi Energy | 3 | 4 | 3 | Product added · 2 kinds | 2025-10-28 |
| JetBrains | 3 | 4 | 1 | Added to CISA KEV · 3 kinds | 2026-08-05 |
| RARLAB | 3 | 4 | 2 | Added to CISA KEV · 2 kinds | 2026-08-06 |
Counting & vendor names
Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.
Data sources and quality
Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates →
CVE publication comparisons cover 2023 onward; KEV changes begin with the first mirrored catalog snapshot. What each catalog cannot see →
Shipped snapshot computed 2026-09-07 from catalog commit ed5547afbae2. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.